HON95 3 jaren geleden
bovenliggende
commit
71c04eb3fe
4 gewijzigde bestanden met toevoegingen van 16 en 1 verwijderingen
  1. 5 0
      config/general/linux-general.md
  2. 1 0
      config/pc/arch-i3.md
  3. 9 0
      config/virt-cont/podman.md
  4. 1 1
      se/lang-plat/cuda.md

+ 5 - 0
config/general/linux-general.md

@@ -38,6 +38,11 @@ breadcrumbs:
 
 ## Commands
 
+### AAA
+
+- Sudo:
+    - Show sudo permissions for current user: `sudo -l`
+
 ### Executables:
 
 - Show type and info: `file <executable>`

+ 1 - 0
config/pc/arch-i3.md

@@ -369,6 +369,7 @@ Note: We're using the PipeWire sound server, a modern, security-focused and comp
 1. Setup the Thunar graphical file manager: `sudo pacman -S thunar`
 1. Setup the Ranger terminal file explorer: `sudo pacman -S ranger`
 1. Setup the VS Code text editor/IDE: `sudo pacman -S code`
+    - Alternatively `visual-studio-code-bin` (AUR) for the Microsoft binary distribution with tracking and Microsoft extensions.
 1. Setup the LibreOffice office document suite: `sudo pacman -S libreoffice-fresh`
 1. Setup the Okular PDF reader: `sudo pacman -S okular`
 

+ 9 - 0
config/virt-cont/podman.md

@@ -6,6 +6,13 @@ breadcrumbs:
 ---
 {% include header.md %}
 
+## TODO
+
+- CGroup driver? Similar to setting `native.cgroupdriver=systemd` for Docker to use the systemd driver instead of creating a new one.
+- Default network MTU. (Some of my networks require a lower MTU because Azure IPv6 networking sucks.)
+- Prometheus/OpenMetrics metrics.
+- Swap limit support. Similar to setting `cgroup_enable=memory swapaccount=1` for Docker.
+
 ## Setup
 
 ### Podman
@@ -61,6 +68,8 @@ breadcrumbs:
 
 ### Networking
 
+- DNS:
+    - By default, the host's DNS domainname and servers will be set in the container's `/etc/resolv.conf`.
 - IPv6:
     - Doesn't seem to be as broken/neglected as in Docker.
     - Add `--ipv6 --subnet=<subnet>/64` to enable on bridges (with NAT and firewalling, like IPv4).

+ 1 - 1
se/lang-plat/cuda.md

@@ -312,7 +312,7 @@ Introduced by NVIDIA in 2006. While GPU compute was hackishly possible before CU
 - If it complains about something Qt, install `libqt5xdg3`.
 - Access to performance counters:
     - Since access to GPU performance counters are limited to protect against side channel attacks (see [Security Notice: NVIDIA Response to “Rendered Insecure: GPU Side Channel Attacks are Practical” - November 2018 (NVIDIA)](https://nvidia.custhelp.com/app/answers/detail/a_id/4738)), it must be run either with sudo (or a user with `CAP_SYS_ADMIN`), or by setting a module option which disables the protection. For non-sensitive applications (e.g. for teaching), this protection is not required. See [NVIDIA Development Tools Solutions - ERR_NVGPUCTRPERM: Permission issue with Performance Counters (NVIDIA)](https://developer.nvidia.com/nvidia-development-tools-solutions-err_nvgpuctrperm-permission-issue-performance-counters) for more info.
-    - Enable access for all users: Add `options nvidia "NVreg_RestrictProfilingToAdminUsers=0"` to e.g. `/etc/modprobe.d/nvidia.conf` and reboot.
+    - Enable access for all users: Add `options nvidia "NVreg_RestrictProfilingToAdminUsers=0"` to e.g. `/etc/modprobe.d/nvidia.conf` and reboot. You may need to run `update-initramfs -u` after editing the file and before rebooting (**TODO** verify).
 
 #### Usage